$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8AA7F0EC5E7111ECAD853A46C4F9AE02.roa File: 8AA7F0EC5E7111ECAD853A46C4F9AE02.roa (raw, json) Hash identifier: F5Dpbo3YvLvyaq1OQJOXO6D06kztTu97ZUomWLud5cg= Subject key identifier: 0C:D8:74:EC:37:E8:F6:F9:88:D8:5D:53:3B:92:BC:91:DD:37:17:0F Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 45A3 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8AA7F0EC5E7111ECAD853A46C4F9AE02.roa Signing time: Thu 05 Sep 2024 03:33:25 +0000 ROA not before: Thu 05 Sep 2024 03:33:25 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 140809 IP address blocks: 103.168.100.0/23 maxlen: 24 2001:df6:d680::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 11:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17827 (0x45a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:33:25 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d92685-2450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d2:f2:70:23:75:fd:28:25:2d:3a:75:58:4a: 1d:17:7a:ff:c8:3f:9f:51:c8:ef:84:42:94:e6:be: 1f:26:96:55:05:00:25:c0:52:9b:36:ae:94:18:8e: 03:08:1c:c3:7b:87:18:e6:c9:cd:34:a7:4b:e5:cf: 33:16:41:33:87:82:a0:8c:2a:7d:c9:27:ec:dd:44: a6:4b:85:04:72:b2:61:59:3a:da:91:d3:48:d9:8b: d4:dc:73:09:ef:38:7a:0f:5d:43:51:72:eb:14:c4: a0:18:a5:47:28:d2:bd:fd:81:f3:d6:d5:4e:22:9b: bf:07:2e:9d:0f:ad:cd:f0:ae:a9:88:80:c7:ab:78: c2:27:22:49:e1:79:45:dc:ee:da:9d:6a:e5:a2:d0: a3:02:c8:57:58:e4:29:0e:83:32:97:f8:c0:66:71: 99:56:20:fe:64:37:15:62:59:5f:dc:e5:21:1e:cc: 14:be:31:e0:2d:32:9c:6f:f1:30:12:51:22:d6:90: 02:37:02:09:9f:ef:e5:5e:08:37:b9:33:be:6d:c6: 7e:2f:f1:9e:1b:59:0b:8f:2c:cb:29:8f:5f:ec:42: 4b:b5:ef:53:87:52:8a:90:4e:0a:82:53:75:12:73: 1b:38:d7:18:85:0c:65:37:10:37:70:e7:01:4c:67: 40:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D8:74:EC:37:E8:F6:F9:88:D8:5D:53:3B:92:BC:91:DD:37:17:0F X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8AA7F0EC5E7111ECAD853A46C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.168.100.0/23 IPv6: 2001:df6:d680::/48 Signature Algorithm: sha256WithRSAEncryption 01:6d:21:4f:4a:81:08:08:eb:dc:81:75:1b:fd:0e:87:64:f7: 06:b0:aa:83:84:d3:38:09:9a:86:8b:5e:48:07:cc:26:37:02: 8a:0c:60:53:e3:ca:ef:b4:8f:00:72:07:74:f5:05:ec:fb:53: f1:1b:8e:81:52:15:74:6a:0a:5f:a2:08:9a:35:39:ac:dd:d4: f4:75:9c:11:3d:12:03:f6:5b:c6:1c:62:30:bb:18:57:0f:b2: ad:d3:7f:e7:bf:1d:18:50:d3:d8:8a:c7:e6:34:7b:9d:26:73: 49:e6:31:7d:a8:d6:fe:e5:2d:72:53:59:80:88:90:aa:38:53: c0:66:cf:77:3f:55:e0:a5:1c:e8:f4:74:7e:f2:db:e9:27:47: 5c:3f:08:5a:0a:41:53:00:18:8f:1f:20:ba:12:8a:70:5d:78: 92:fe:cf:8f:75:5f:3b:61:22:5a:11:2d:9c:75:9c:cf:e8:e0: f4:e5:73:71:b5:a0:21:ff:43:f5:c1:fe:6d:97:30:36:b9:73: 14:da:26:d5:91:10:78:b5:59:6e:fc:76:c6:fa:17:9a:41:e4: 04:dc:76:ca:1f:7b:7b:02:52:73:09:f9:21:2b:31:a1:1a:f3: 7c:3f:00:f8:49:4f:d1:a4:f3:a0:5f:7f:fa:10:24:9b:e5:8d: c6:27:e3:de -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICRaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzMzI1WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjY4NS0yNDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxNLycCN1/SglLTp1WEodF3r/yD+fUcjvhEKU5r4fJpZVBQAlwFKbNq6UGI4D CBzDe4cY5snNNKdL5c8zFkEzh4KgjCp9ySfs3USmS4UEcrJhWTrakdNI2YvU3HMJ 7zh6D11DUXLrFMSgGKVHKNK9/YHz1tVOIpu/By6dD63N8K6piIDHq3jCJyJJ4XlF 3O7anWrlotCjAshXWOQpDoMyl/jAZnGZViD+ZDcVYllf3OUhHswUvjHgLTKcb/Ew ElEi1pACNwIJn+/lXgg3uTO+bcZ+L/GeG1kLjyzLKY9f7EJLte9Th1KKkE4KglN1 EnMbONcYhQxlNxA3cOcBTGdADwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFAzYdOw3 6Pb5iNhdUzuSvJHdNxcPMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvOEFBN0YwRUM1 RTcxMTFFQ0FEODUzQTQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnqGQwDwQCAAIwCQMHACABDfbWgDANBgkqhkiG9w0BAQsF AAOCAQEAAW0hT0qBCAjr3IF1G/0Oh2T3BrCqg4TTOAmahoteSAfMJjcCigxgU+PK 77SPAHIHdPUF7PtT8RuOgVIVdGoKX6IImjU5rN3U9HWcET0SA/ZbxhxiMLsYVw+y rdN/578dGFDT2IrH5jR7nSZzSeYxfajW/uUtclNZgIiQqjhTwGbPdz9V4KUc6PR0 fvLb6SdHXD8IWgpBUwAYjx8guhKKcF14kv7Pj3VfO2EiWhEtnHWcz+jg9OVzcbWg If9D9cH+bZcwNrlzFNom1ZEQeLVZbvx2xvoXmkHkBNx2yh97ewJScwn5ISsxoRrz fD8A+ElP0aTzoF9/+hAkm+WNxifj3g== -----END CERTIFICATE-----Generated at Mon Nov 25 13:17:32 2024 by rpki-client on console-ams.rpki-client.org